cbcvebase.
CVE-2019-1723
published 2019-03-13

CVE-2019-1723: A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by using an…

PriorityP269critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
5.82%
92.3th percentile
A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the affected software has a user account with a default, static password. An attacker could exploit this vulnerability by remotely connecting to the affected system using this account. A successful exploit could allow the attacker to log in to the CSPC using the default account. For Cisco CSPC 2.7.x, Cisco fixed this vulnerability in Release 2.7.4.6. For Cisco CSPC 2.8.x, Cisco fixed this vulnerability in Release 2.8.1.2.

Affected

10 ranges
VendorProductVersion rangeFixed in
ciscocisco_common_services_platform_collector_software>= unspecified < 2.7.4.62.7.4.6
ciscocisco_common_services_platform_collector_software>= unspecified < 2.8.1.22.8.1.2
ciscocommon_services_platform_collector>= 2.7.2 < 2.7.4.62.7.4.6
ciscocommon_services_platform_collector>= 2.8.0 < 2.8.1.22.8.1.2
ciscocommon_services_platform_collector_static_credential
msrcasp.net_core_3.1
msrcasp.net_core_5.0
msrcmicrosoft_visual_studio_2019_version_16.4
msrcmicrosoft_visual_studio_2019_version_16.7
msrcmicrosoft_visual_studio_2019_version_16.8

Detection & IOCsextracted from sources · hover to see the quote

  • Detect remote login attempts to CSPC using a default, static credential account (non-administrator) — monitor for successful authentication from unexpected/external sources on the CSPC management interface.
  • Flag unauthenticated remote access attempts to Cisco CSPC versions prior to 2.7.4.6 (2.7.x branch) and prior to 2.8.1.2 (2.8.x branch) as potentially exploiting CVE-2019-1723.
  • ·A workaround exists per Cisco's advisory in addition to patching; consult the advisory for workaround details.

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_cisco9.8CRITICAL
vendor_msrc7.5HIGH
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.